CVE-2018-2488

概要

参考情報

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

fiori client のその他の脆弱性

• CVE-2021-33699中 6.5Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in their AndroidManifes…
• CVE-2018-2491高 7.8When opening a deep link URL in SAP Fiori Client with log level set to "Debug", the client application logs the URL to the log file. If this…
• CVE-2018-2490高 7.8The broadcast messages received by SAP Fiori Client are not protected by permissions. SAP Fiori Client version 1.11.5 in Google Play store a…
• CVE-2018-2489高 7.8Locally, without any permission, an arbitrary android application could delete the SSO configuration of SAP Fiori Client. SAP Fiori Client v…
• CVE-2018-2485高 7.7It is possible for a malicious application or malware to execute JavaScript in a SAP Fiori application. This can include reading and writing…